Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pin terragrunt image version #351

Merged
merged 3 commits into from
Dec 2, 2024
Merged

Pin terragrunt image version #351

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
018f3fe
Pin terragrunt image version
AlCutter Dec 2, 2024
0c4d84d
Fully qualify robot users in cloudbuild
AlCutter Dec 2, 2024
53172ce
Add missing env for getting terraform outputs
AlCutter Dec 2, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 12 additions & 10 deletions deployment/modules/gcp/cloudbuild/main.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ resource "google_cloudbuild_trigger" "docker" {
## This might happen if a previous cloud build failed for some reason.
step {
id = "preclean_env"
name = "alpine/terragrunt"
name = "alpine/terragrunt:1.9.5"
script = <<EOT
terragrunt --terragrunt-non-interactive --terragrunt-no-color destroy -auto-approve -no-color 2>&1
EOT
Expand All @@ -46,8 +46,8 @@ resource "google_cloudbuild_trigger" "docker" {
"TESSERA_SIGNER=unused",
"TESSERA_CLOUD_RUN_DOCKER_IMAGE=${local.conformance_gcp_docker_image}:latest",
"TESSERA_CLOUD_RUN_SERVICE_ACCOUNT=cloudrun-ci-sa@trillian-tessera.iam.gserviceaccount.com",
"TESSERA_READER=cloudbuild-prod-sa@trillian-tessera.iam.gserviceaccount.com",
"TESSERA_WRITER=cloudbuild-prod-sa@trillian-tessera.iam.gserviceaccount.com",
"TESSERA_READER=serviceAccount:[email protected]",
"TESSERA_WRITER=serviceAccount:[email protected]",
"GOOGLE_PROJECT=${var.project_id}",
"TF_IN_AUTOMATION=1",
"TF_INPUT=false",
Expand Down Expand Up @@ -94,7 +94,7 @@ resource "google_cloudbuild_trigger" "docker" {
## running the conformance server docker image built above.
step {
id = "terraform_apply_conformance_ci"
name = "alpine/terragrunt"
name = "alpine/terragrunt:1.9.5"
script = <<EOT
export TESSERA_SIGNER=$(cat /workspace/key.sec)
terragrunt --terragrunt-non-interactive --terragrunt-no-color apply -auto-approve -no-color 2>&1
Expand All @@ -104,8 +104,8 @@ resource "google_cloudbuild_trigger" "docker" {
"GOOGLE_PROJECT=${var.project_id}",
"TESSERA_CLOUD_RUN_DOCKER_IMAGE=${local.conformance_gcp_docker_image}:latest",
"TESSERA_CLOUD_RUN_SERVICE_ACCOUNT=cloudrun-ci-sa@trillian-tessera.iam.gserviceaccount.com",
"TESSERA_READER=cloudbuild-prod-sa@trillian-tessera.iam.gserviceaccount.com",
"TESSERA_WRITER=cloudbuild-prod-sa@trillian-tessera.iam.gserviceaccount.com",
"TESSERA_READER=serviceAccount:[email protected]",
"TESSERA_WRITER=serviceAccount:[email protected]",
"TF_IN_AUTOMATION=1",
"TF_INPUT=false",
"TF_VAR_project_id=${var.project_id}"
Expand All @@ -116,10 +116,12 @@ resource "google_cloudbuild_trigger" "docker" {
## them in files under /workspace. These are needed for later steps.
step {
id = "terraform_outputs"
name = "alpine/terragrunt"
name = "alpine/terragrunt:1.9.5"
script = <<EOT
cd deployment/live/gcp/conformance/ci
export GOOGLE_PROJECT=${var.project_id}
export TESSERA_SIGNER=$(cat /workspace/key.sec)
export TESSERA_CLOUD_RUN_DOCKER_IMAGE=unused,
roger2hk marked this conversation as resolved.
Show resolved Hide resolved
terragrunt output --raw conformance_url > /workspace/conformance_url
EOT
wait_for = ["terraform_apply_conformance_ci"]
Expand Down Expand Up @@ -165,7 +167,7 @@ resource "google_cloudbuild_trigger" "docker" {
## above.
step {
id = "terraform_destroy_conformance_ci"
name = "alpine/terragrunt"
name = "alpine/terragrunt:1.9.5"
script = <<EOT
terragrunt --terragrunt-non-interactive --terragrunt-no-color destroy -auto-approve -no-color 2>&1
EOT
Expand All @@ -174,8 +176,8 @@ resource "google_cloudbuild_trigger" "docker" {
"TESSERA_SIGNER=unused",
"TESSERA_CLOUD_RUN_DOCKER_IMAGE=${local.conformance_gcp_docker_image}:latest",
"TESSERA_CLOUD_RUN_SERVICE_ACCOUNT=cloudrun-ci-sa@trillian-tessera.iam.gserviceaccount.com",
"TESSERA_READER=cloudbuild-prod-sa@trillian-tessera.iam.gserviceaccount.com",
"TESSERA_WRITER=cloudbuild-prod-sa@trillian-tessera.iam.gserviceaccount.com",
"TESSERA_READER=serviceAccount:[email protected]",
"TESSERA_WRITER=serviceAccount:[email protected]",
"GOOGLE_PROJECT=${var.project_id}",
"TF_IN_AUTOMATION=1",
"TF_INPUT=false",
Expand Down
Loading